Currently there is no easy way to set the max decompressed size using this extension. This means that snappy can be used for zip bombing attacks if it's used to compress user input.
A $max_decoded_len parameter, which limits the max size of the decompressed payload similar to zlib_decode(), would be nice to have.
Currently there is no easy way to set the max decompressed size using this extension. This means that snappy can be used for zip bombing attacks if it's used to compress user input.
A $max_decoded_len parameter, which limits the max size of the decompressed payload similar to zlib_decode(), would be nice to have.